SE-NSE Forums:

Jump to content

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic
  • Bookmark

Full Java Security Permissions W810+others? Through FAR/XS++ No .vkp patches or security certificates involved

#1 User is offline   Da_G Icon

  • No Se-nse
  • PipPip
  • Group: Members
  • Posts: 72
  • Joined: 30-January 07

Posted 04 May 2007 - 08:53 PM

So simple!

The quick way: take the attached file make several copies of it. Rename each copy to match the filenames in /tpa/preset/system/java/sec (or extsec depending on firmware), and overwrite them on the phone. Done!

The explanation:

\tpa\preset\system\java\sec

or

\tpa\preset\system\java\extsec

on cingular firmware phones..

seemingly randomly-named files such as:

j3f2912a7b4c8969dc39464c57232a13d5f89994f
j21f8296058e8b6b5f9caff08829a4099d1caa6dd

[EDIT: I forgot to add that you can take a look in /tpa/preset/system/ams at the files with the same name, in a hex editor, unicode view. Look for strings telling which file matches up with which program (ex. opera mini's file contains the string opera)]

Each file is a bitmask representing the phones settings for java security. I did not bother determining what each bit does, just which bit allows full permissions. So, open the file in a hex editor, you should see for example:

030303030303030303020202020202020202020202020202020202020203030303

Make it:

050505050505050505050505050505050505050505050505050505050505050505

And you're done! Permissions still show as not configurable on the phone, and also information will show untrusted, but it works great. Survives a master reset, as well.

I'll be integrating it into my cingular firmware (shameless plug) here.

Attached File(s)


This post has been edited by Da_G: 04 May 2007 - 10:01 PM

0

#2 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 04 May 2007 - 09:28 PM

If you have a lot of java apps and games, I guess it could be hard to find the right file :p

Great find thou! :good:
Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#3 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 04 May 2007 - 09:41 PM

To make it easier:
Drop the files on the program in the attachment! :cool:
And don't drop any other files on it!!!! (It will kill them :p)

Attached File(s)


This post has been edited by nkls: 04 May 2007 - 09:54 PM

Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#4 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 04 May 2007 - 10:01 PM

Is it safe to drop all my java....things on it? I have a lot and dunno what ones are the ones i need? Don't wanna lose my high scores lol!
0

#5 User is offline   Da_G Icon

  • No Se-nse
  • PipPip
  • Group: Members
  • Posts: 72
  • Joined: 30-January 07

Posted 04 May 2007 - 10:03 PM

View Postwcis, on 2007-05-04 15:01, said:

Is it safe to drop all my java....things on it? I have a lot and dunno what ones are the ones i need? Don't wanna lose my high scores lol!


All saved data from java applications/games is stored in /tpa/preset/system/ams/db - as long as you dont mess with that folder you shouldn't lose any data. The files in /tpa/preset/system/java/sec are only related to security.

As for is it safe, do you trust the programs on your phone not to do something naughty? :p

Also check my edit of the original post for a method of determining which file matches up with which java program.

This post has been edited by Da_G: 04 May 2007 - 10:04 PM

0

#6 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 04 May 2007 - 10:24 PM

Well, actually I prefer the halmer method, because it doesn't require the use of far manager.
And it's easier to chose which apps I want to trust. :)
Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#7 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 04 May 2007 - 10:27 PM

Holy crap! It worked!! I just copied sec to my pc, copied it for safety, dropped every file in the sec folder on nkls batch processor in batches of 10(cheers nkls :), deleted the phones sec and copied the newly processed folder onto the phone again.

All scores are still intact, and i have no more read write prompts in mini oper hack, moby ex 3, pull face etc! Genius! Cheers guys.

While i'm here, any way to run the camera while java is running without patching? You guys seem to know a lot of tricks lol!
0

#8 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 04 May 2007 - 10:53 PM

View Postwcis, on 2007-05-05 00:27, said:

While i'm here, any way to run the camera while java is running without patching? You guys seem to know a lot of tricks lol!

I know how to run the camera with a java app running, and also how to run a java app with the camera running! ^^
It's totally useless, I maybe post a video tomorrow :p
Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#9 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 04 May 2007 - 11:00 PM

If you can, please put it into text or pictures, cos i'm using a gprs connection limited to 1mb or so connections, so long videos time out. Is it complicated?
0

#10 User is offline   Da_G Icon

  • No Se-nse
  • PipPip
  • Group: Members
  • Posts: 72
  • Joined: 30-January 07

Posted 04 May 2007 - 11:11 PM

View Postnkls, on 2007-05-04 15:24, said:

Well, actually I prefer the halmer method, because it doesn't require the use of far manager.
And it's easier to chose which apps I want to trust. :)


Unfortunatly halmer doesn't work on some firmwares (cingular for example), or i'd be using that too :D Thanks for the app.
0

#11 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 04 May 2007 - 11:26 PM

Well, I simply just open the camera (by holding down the camera key), and at the same time open the java application....
The camera will first open, and then the java app. The java app will become VERY slow (because the camera is on), but if I minimize the app, the camera will show again.
And then the app will run in "background mode", with the camera running!
But there is no way to switch back to the app without closing the camera, and then I can't open the camera again while the app is running.
Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#12 User is offline   qwerty12 Icon

  • Se-nse's No1 Baller
  • Icon
  • Group: VIP
  • Posts: 4,096
  • Joined: 04-July 06

Posted 05 May 2007 - 06:38 AM

Nice trick :), great for those with Cingular f/w or dont want to install again. But Halmer is easier to do :(.

@nkls, that is another reason we need patches working. I used to have a patch on my W800/K750 that would run the camera perfectly with a java app (it just had to be minimised). :D :(. I hope Dark-Skuller isnt faking :(
0

#13 User is offline   LordPhoenix Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 143
  • Joined: 13-February 07
  • Gender:Male
  • Mobile:DEAD! |-|= Black W810i - [Main : (R4EA031) FS : (R4ED001)]

Posted 05 May 2007 - 06:56 AM

dude I think he is!
"Logic gets you from A to B, Imagination gets you everywhere"
0

#14 User is offline   qwerty12 Icon

  • Se-nse's No1 Baller
  • Icon
  • Group: VIP
  • Posts: 4,096
  • Joined: 04-July 06

Posted 05 May 2007 - 06:59 AM

He's got pisanggoreng to translate for him, so maybe?

Anyway, I am going :offtopic:
0

#15 User is offline   nkls Icon

  • Se-nse-ual
  • Icon
  • View gallery
  • Group: Moderators
  • Posts: 813
  • Joined: 30-September 06
  • Gender:Male
  • Location:Sweden
  • Mobile:W810 | K850 | M600

Posted 05 May 2007 - 08:35 AM

View Postqwerty12, on 2007-05-05 08:38, said:

@nkls, that is another reason we need patches working. I used to have a patch on my W800/K750 that would run the camera perfectly with a java app (it just had to be minimised). :D :(. I hope Dark-Skuller isnt faking :(

Yes. Why aren't SE allowing the camera to run at the same time as java app? :mad:
Posted Imagenot very up to date but I'm to lazy to fix it
[K850i][W810i|8GB][M600i][C902i][My Box][My (somewhat dead but still existing) Blog]
[My elfs:][CameraShortcuts v2.1β][NShooter v3.1][Locky v1.2][SequenceSnapper v1.2][OMAC v1.0β]
0

#16 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 05 May 2007 - 06:25 PM

That trick you posted doesn't work on the k750, was hoping for a little miracle i suppose :D

A blacklist instead of white is another SE should allow, there's many things in fact.
0

#17 User is offline   qwerty12 Icon

  • Se-nse's No1 Baller
  • Icon
  • Group: VIP
  • Posts: 4,096
  • Joined: 04-July 06

Posted 06 May 2007 - 07:39 AM

On K750, just patch it!

Trust me, I had one.

There is a whitelist patch and a java patch. Just install anything in any way and you wont see a single java prompt.
0

#18 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 06 May 2007 - 08:58 AM

I know about the patches mate, but i'm on old FW and unwilling to upgrade due to a previous failed attempt which ruined my old k750.
0

#19 User is offline   qwerty12 Icon

  • Se-nse's No1 Baller
  • Icon
  • Group: VIP
  • Posts: 4,096
  • Joined: 04-July 06

Posted 06 May 2007 - 09:07 AM

Oh fair enough :).

You should try the halmer certificate then. Works on any firmware and only requires far to upload the certificate.

This post has been edited by qwerty12: 06 May 2007 - 09:08 AM

0

SE-NSE

#20 User is offline   wcis Icon

  • Non-se-nse
  • PipPipPip
  • Group: Members
  • Posts: 112
  • Joined: 16-February 07

Posted 06 May 2007 - 10:02 AM

I got the software for that yesterday, not tried it yet though. It means i need to master reset once i upload the cert yes?

I've deleted a whole bunch of stuff from my system. I know exactly what's been edited and deleted, just scared in case i forgot lol! I went a few days before figuring out how to fix stuff the last time.
0

  • (2 Pages)
  • +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic
  • Bookmark

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users